VULNERABILITY INTELLIGENCE
CVE-2019-25740
CVSS score6.5 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2026-06-04
Last modified2026-07-22
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
Joomla com_jsjobs 1.2.6 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating custom userfield parameters. Attackers can send POST requests to the job.savejob task with path traversal sequences in the field_2 parameter to delete arbitrary files accessible to the web server.
Weakness classification
- disclosure@vulncheck.com: CWE-22